SecurityA Staging Server Left Open for Six Months
A cloud-migration audit found a temporary test environment exposing live customer data, reinforcing a familiar lesson about forgotten infrastructure.
> Search
12 results for “sso”
Security
AI & MLThe AI graveyard's hard lessons
A running record of AI products that shut down or missed expectations shows even the biggest players stumble.
Cyber CrimeHealthcare Cyberattacks Expose 284M Patient Records
McKesson and Boston Scientific grapple with breaches exposing patient data and disrupting implanted cardiac devices.
Cyber CrimeMcKesson Breach Stakes Rise as Deadline Nears
Healthcare giant McKesson confirms data theft as ShinyHunters threat to leak by September 1.
SecuritySilent Patch Leaves WordPress Admins Exposed
Critical MiniOrange SAML SSO flaws exploited in wild; silent patch raises risk for WordPress sites.
SecurityChipmakers Patch Over 80 Bugs, Including Severe Flaws
Intel and AMD release combined patches for more than 80 vulnerabilities, including high-severity issues in processors and software.
Cyber CrimeHealthcare SSO Targeted by ShinyHunters
A new advisory from Health-ISAC warns that extortion actors are compromising single-sign-on credentials to exfiltrate cloud data.
SecurityBudibase OIDC SSO Flaw Allows Account Takeover
A critical vulnerability in Budibase allows attackers to hijack existing user accounts by exploiting improper email validation in the OIDC login process.
SecurityCISA Adds Actively Exploited KNX Protocol Flaw to KEV Catalog
A critical account lockout vulnerability in KNX Association products is now under active exploitation, requiring immediate remediation by federal agencies.
Cyber CrimeRansomware Resurgence Signals New Era of Fragmented Threat Actors
After a brief period of decline, ransomware activity has spiked as the dissolution of the Conti group fuels a new wave of attacks.
SecurityLessons in Transparency from CISA's Six-Month GitHub Exposure
A CISA postmortem reveals how a contractor's public repository leak serves as a critical guide for improving organizational security.
Cyber CrimeDormant Infostealer Infection Turns World Cup Spat Into Data Breach
A decade-long developer's device, infected nearly a year ago, likely provided the gateway for a breach of the Argentine Football Association.